Data breaches are climbing in cost to organizations. Here's a claim, that in 2017, the average breach costs $3.62 million. https://www.scrypt.com/blog/average-c

Data breaches are climbing in cost to organizations. Here's a claim, that in 2017, the average breach costs $3.62 million. https://www.scrypt.com/blog/average-cost-data-breach-2017-3-62-million/ https://www.scrypt.com/blog/average-cost-data-breach-2017-3-... (I've seen similar claims in different ranges. Costs of breaches in the US are pretty high - over $7 million.) Even Equifax probably wants the 3-4 billion in valuation it's lost since the breach. The solution appears to be buying tools to avoid and respond to breaches quickly, instead of engaging and building in security awareness. (Microsoft's security development lifecycle comes to mind.) IMO, both approaches are likely cost effective, though I have no numbers or research to back that up.